Enum: AuthenticationActivityIdEnum

Authentication activity_id values.

Permissible Values

Value	Meaning	Description
LOGON	None	A new logon session was requested
LOGOFF	None	A logon session was terminated and no longer exists
AUTHENTICATION_TICKET	None	A Kerberos authentication ticket (TGT) was requested
SERVICE_TICKET_REQUEST	None	A Kerberos service ticket was requested
SERVICE_TICKET_RENEW	None	A Kerberos service ticket was renewed
PREAUTH	None	A preauthentication stage was engaged
ACCOUNT_SWITCH	None	A utility or service switched the user account
UNKNOWN	None	The event activity is unknown
OTHER	None	The event activity is not mapped

Slots

Name	Description
activity_id

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/ocsf

LinkML Source

name: AuthenticationActivityIdEnum
description: Authentication activity_id values.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  LOGON:
    text: LOGON
    description: A new logon session was requested.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Logon
  LOGOFF:
    text: LOGOFF
    description: A logon session was terminated and no longer exists.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Logoff
  AUTHENTICATION_TICKET:
    text: AUTHENTICATION_TICKET
    description: A Kerberos authentication ticket (TGT) was requested.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Authentication Ticket
  SERVICE_TICKET_REQUEST:
    text: SERVICE_TICKET_REQUEST
    description: A Kerberos service ticket was requested.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: Service Ticket Request
  SERVICE_TICKET_RENEW:
    text: SERVICE_TICKET_RENEW
    description: A Kerberos service ticket was renewed.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: Service Ticket Renew
  PREAUTH:
    text: PREAUTH
    description: A preauthentication stage was engaged.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: Preauth
  ACCOUNT_SWITCH:
    text: ACCOUNT_SWITCH
    description: 'A utility or service switched the user account. See the

      <code>account_switch_type_id</code> attribute for more details.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: Account Switch
  UNKNOWN:
    text: UNKNOWN
    description: The event activity is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  OTHER:
    text: OTHER
    description: 'The event activity is not mapped. See the <code>activity_name</code>
      attribute,

      which contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other